Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Ujn2J4r2LFLl-_gb7Sy0F7rALOo.roa
File: Ujn2J4r2LFLl-_gb7Sy0F7rALOo.roa (raw, json)
Hash identifier: z1kcbtHeiXC1YqOD9mGfLnM0qBdsjxe8MY5vg1dMbLQ=
Subject key identifier: 52:39:F6:27:8A:F6:2C:52:E5:FB:F8:1B:ED:2C:B4:17:BA:C0:2C:EA
Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Certificate serial: 018CCA99ED6F1F9FD550FDAEBCEA7F2C55B7
Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Ujn2J4r2LFLl-_gb7Sy0F7rALOo.roa
Signing time: Tue 02 Jan 2024 14:35:34 +0000
ROA not before: Tue 02 Jan 2024 14:35:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 146961
IP address blocks: 194.53.201.0/24 maxlen: 24
194.53.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:ed:6f:1f:9f:d5:50:fd:ae:bc:ea:7f:2c:55:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Validity
Not Before: Jan 2 14:35:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5239f6278af62c52e5fbf81bed2cb417bac02cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:07:b9:73:6a:6a:da:ab:b8:cc:78:49:08:f1:
6a:20:19:34:d6:b3:46:51:1d:a7:71:c4:07:95:1f:
7c:89:9c:92:bb:35:43:77:32:1b:bb:95:e6:e6:21:
30:f4:63:12:c6:ca:4f:d4:58:50:2b:73:2f:32:fe:
8b:5d:43:8c:4e:a7:94:16:ee:77:2d:8b:cf:b7:ff:
27:f6:ec:d1:e9:32:e8:7a:36:f2:09:44:3a:66:17:
f5:22:4c:ab:f8:b2:2b:23:35:18:bb:c3:88:d4:7b:
a7:c9:90:c6:69:06:17:e5:4c:0c:6e:11:4c:2d:a3:
5d:f4:1a:00:4d:cb:fd:2e:6d:34:0b:8b:05:43:a7:
49:e4:06:52:07:ed:50:ec:1b:32:7c:11:69:dc:7f:
75:e9:55:9a:b1:8d:93:6f:f7:9b:94:66:62:82:73:
6c:6f:61:91:75:09:c7:00:ae:a8:4b:65:96:2b:f7:
ad:a8:e1:15:ba:08:7e:20:70:6b:32:3f:12:50:47:
7d:c1:6d:96:c1:db:cb:3d:7e:cb:29:bc:8c:09:ba:
22:fb:9f:1b:bf:27:cd:d7:67:21:40:73:b4:94:78:
c4:70:fb:b6:2b:c5:2b:06:8d:0d:ec:d3:2e:87:5a:
e0:27:8e:94:13:8a:7d:78:f5:1e:e8:8d:c7:96:80:
ca:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:39:F6:27:8A:F6:2C:52:E5:FB:F8:1B:ED:2C:B4:17:BA:C0:2C:EA
X509v3 Authority Key Identifier:
keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Ujn2J4r2LFLl-_gb7Sy0F7rALOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.201.0-194.53.202.255
Signature Algorithm: sha256WithRSAEncryption
00:a1:c0:0b:ac:e8:9d:33:a0:10:51:f2:13:65:7a:22:89:fd:
5d:2c:64:5c:35:cd:18:df:2b:5d:ef:fc:19:9f:ed:69:64:6f:
42:cf:06:05:c1:8c:3a:fb:ca:5b:41:58:74:89:c6:25:88:e6:
0b:10:cb:0e:42:72:e9:e5:0f:7e:6f:22:63:ae:11:ce:4c:32:
51:ab:77:1d:b6:53:e7:03:10:c3:41:7f:36:7e:93:9a:bb:eb:
9b:b4:3b:f3:6d:05:0e:62:b2:bb:eb:28:d0:20:ae:1f:ca:1d:
9f:3c:d9:b4:c3:1c:ad:d8:d3:ba:f1:39:06:f4:5e:ee:6d:aa:
b9:82:f6:c1:70:56:c7:c0:03:cb:68:ce:5c:c2:69:cf:3c:3e:
21:ed:b3:f7:05:01:7a:d7:81:37:aa:96:b8:7f:64:3a:47:0f:
f5:f1:12:b9:a4:67:f3:22:07:49:d3:dd:28:9a:f2:2a:20:cc:
22:c4:2f:f2:a4:6a:21:d2:ef:0f:a7:f7:64:6c:b0:4e:15:0f:
d7:22:c1:7c:73:31:4f:29:63:74:e5:98:f2:8d:dc:c6:4a:aa:
3b:9c:48:98:ff:d4:99:da:2c:8d:7d:72:e5:aa:56:c5:88:d2:
2e:bd:db:d3:63:be:14:53:cd:32:05:ff:75:b4:ce:d1:0e:d0:
07:f0:77:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:53:42 2024 by rpki-client on console-fra.rpki-client.org